Authentication flaw

The web application on Agilia Link+ version 3.0 implements authentication and session management mechanisms exclusively on the client-side and does not protect authentication attributes sufficiently...

CVE-2021-23196

The CVE-2021-23196 vulnerability affects Fresenius Kabi Agilia Link+ (version 3.0) where authentication and session management are implemented exclusively on the client side, leaving authentication attributes insufficiently protected. This client-side handling is identified as the root cause for ...

CVE-2021-23196 Fresenius Kabi Agilia Connect Infusion System insufficiently protected credentials

The web application on Agilia Link+ version 3.0 implements authentication and session management mechanisms exclusively on the client-side and does not protect authentication attributes sufficiently...

PT-2022-9375 · Unknown · Agilia Link+

Name of the Vulnerable Software and Affected Versions: Agilia Link+ version 3.0 Description: The web application implements authentication and session management mechanisms exclusively on the client-side and does not protect authentication attributes sufficiently. Recommendations: For Agilia Link...

Samsung Health Improper Session Management Vulnerability

Samsung Health is a health management app for Samsung Samsung mobile devices. An improper session management vulnerability exists in Samsung Health versions prior to 6.20.1.005, which stems from a Samsung Health account not being logged out after a user is removed from an inactive device. An...

Zoho ManageEngine Access Manager Plus has an unspecified vulnerability

ZOHO Zoho ManageEngine Access Manager Plus is a privileged session management solution from ZOHO for enterprises to centralize, secure, and manage remote access to privileged sessions.A security vulnerability exists in versions of Zoho ManageEngine Access Manager Plus prior to 4203. The...

MTN Group: Remove Every User, Admin, And Owner Out Of Their Teams on developers.mtn.com via IDOR + Information Disclosure

Hello world, This vulnerability is too involved with regular users, in order for us to prevent any damage, we need 3 different user accounts we own. This gives us specific "userid" and "teamid" to work with. There's an Information Disclosure as a side effect of this vulnerability. User and team...

CVE-2022-22283

Improper session management vulnerability in Samsung Health prior to 6.20.1.005 prevents logging out from Samsung Health App...

CVE-2022-22283

Improper session management vulnerability in Samsung Health prior to 6.20.1.005 prevents logging out from Samsung Health App...

CVE-2022-22283

Improper session management vulnerability in Samsung Health prior to 6.20.1.005 prevents logging out from Samsung Health App...

Design/Logic Flaw

Improper session management vulnerability in Samsung Health prior to 6.20.1.005 prevents logging out from Samsung Health App...

Samsung Health 代码问题漏洞

Samsung Health is a health management app for Samsung Samsung mobile devices. An improper session management vulnerability exists in Samsung Health versions prior to 6.20.1.005, which stems from a Samsung Health account not being logged out after a user is removed from an inactive device. An...

CVE-2022-22283

Improper session management vulnerability in Samsung Health prior to 6.20.1.005 prevents logging out from Samsung Health App...

CVE-2022-22283

Samsung Health suffers from an improper session management vulnerability that prevents logging out. Multiple connected sources indicate affected versions are prior to 6.20.1.005. The issue stems from session handling that could allow access to sensitive data after account status changes or device...

Insecure Session Management

shopware/shopware uses an insecure session management. The library does not invalidate session tokens after the user password change, allowing an attacker to gain access to the system if an old session token was obtained...

CVE-2021-20151

Trendnet AC2600 TEW-827DRU version 2.08B01 contains a flaw in the session management for the device. The router's management software manages web sessions based on IP address rather than verifying client cookies/session tokens/etc. This allows an attacker whether from a different computer,...

CVE-2021-20151

CVE-2021-20151 affects Trendnet AC2600 TEW-827DRU (firmware 2.08B01). The root cause is session management that relies on IP address rather than validating cookies/session tokens, enabling session takeover if the attacker can spoof or take over the original IP. The CVSS vectors indicate network a...

CVE-2021-20151

Trendnet AC2600 TEW-827DRU version 2.08B01 contains a flaw in the session management for the device. The router's management software manages web sessions based on IP address rather than verifying client cookies/session tokens/etc. This allows an attacker whether from a different computer,...

Fresenius Kabi Agilia Connect Infusion System Licensing Issue Vulnerability

An authorization issue vulnerability exists in the Fresenius Kabi Agilia Connect Infusion System, an infusion system from the German company Fresenius Kabi, which stems from the product's client-side implementation of only authentication and session management mechanisms. No detailed vulnerabilit...

The vulnerability of the WISE-4060 Ethernet module’s microprogramming software, related to session management errors, allows a intruder to gain unauthorized access to the device.

The vulnerability of the WISE-4060 Ethernet module’s microprogramming software is related to session management errors. Exploiting this vulnerability could allow an attacker to gain unauthorized access to the device remotely...